santa/MODULE.bazel at main · northpolesec/santa · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
module(name = "santa")

bazel_dep(name = "abseil-cpp", version = "20260526.0")
bazel_dep(name = "apple_support", version = "2.8.0")
bazel_dep(name = "cel-cpp", version = "0.15.0")
bazel_dep(name = "googletest", version = "1.17.0.bcr.2")
bazel_dep(name = "protobuf", version = "35.1")
bazel_dep(name = "rules_apple", version = "4.3.3")
bazel_dep(name = "rules_cc", version = "0.2.22")
bazel_dep(name = "rules_fuzzing", version = "0.8.0")
bazel_dep(name = "rules_shell", version = "0.8.0")
bazel_dep(name = "rules_swift", version = "3.6.1")
bazel_dep(name = "xxhash", version = "0.8.3.bcr.1")
bazel_dep(name = "zstd", version = "1.5.7.bcr.1")
bazel_dep(name = "boringssl", version = "0.20260803.0")

# rules_apple is held at 4.3.3 because 4.4.0 stopped embedding the Info.plist in
# the non-native arch slice of macos_command_line_application, leaving that slice
# with `Info.plist=not bound`. codesign cannot repair it after the fact, so
# notarization rejects the universal binaries with "The signature of the binary
# is invalid". The override is needed as well as the version above: MVS takes the
# highest version declared anywhere in the graph, and santanetd -- injected into
# release builds -- declares its own.
single_version_override(
    module_name = "rules_apple",
    version = "4.3.3",
)

# North Pole Protos
bazel_dep(name = "protos", version = "1.0.1", repo_name = "northpolesec_protos")
git_override(
    module_name = "protos",
    commit = "23a2f8eabf88805d32140d7ea6584c0d8d47c9b9",
    remote = "https://github.com/northpolesec/protos",
)

# Profiles
bazel_dep(name = "profiles", version = "1.0.0")
local_path_override(
    module_name = "profiles",
    path = "profiles",
)

# Santa Network Extension
# By default, points to a stub that provides an empty implementation.
# Maintainers can inject the real implementation at build time.
bazel_dep(name = "santanetd", version = "1.0.0")
local_path_override(
    module_name = "santanetd",
    path = "stubs/santanetd",
)

# Sleigh
# By default, points to a stub that provides an empty implementation.
# Maintainers can inject the real implementation at build time.
bazel_dep(name = "sleigh", version = "1.0.0")
local_path_override(
    module_name = "sleigh",
    path = "stubs/sleigh",
)

# FMDB
non_module_deps = use_extension("//deps:non_module_deps.bzl", "non_module_deps")
use_repo(non_module_deps, "FMDB")
use_repo(non_module_deps, "OCMock")
use_repo(non_module_deps, "nats_c")

# Hedron's Compile Commands Extractor
# Note: Moved to a fork because the original project's maintenance status is in limbo.
# The maintainer claims to still be around, but nothing is getting merged:
#   https://github.com/hedronvision/bazel-compile-commands-extractor/issues/232#issuecomment-2512931043
#   https://github.com/hedronvision/bazel-compile-commands-extractor/issues/240
bazel_dep(name = "hedron_compile_commands")
git_override(
    module_name = "hedron_compile_commands",
    commit = "f5fbd4cee671d8d908f37c83abaf70fba5928fc7",
    remote = "https://github.com/mikael-s-persson/bazel-compile-commands-extractor.git",
)